This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/qfKTtc92ECeLqxY0pN61pZowEJ0.roa File: qfKTtc92ECeLqxY0pN61pZowEJ0.roa (raw, json) Hash identifier: saI2W6cvyuecWSJKWCsrk2PPJbyqmCix+GZcol+nc5A= Subject key identifier: A9:F2:93:B5:CF:76:10:27:8B:AB:16:34:A4:DE:B5:A5:9A:30:10:9D Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Certificate serial: 019B7AC7DCFCE040D0AB64BBBE73234DF36A Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/qfKTtc92ECeLqxY0pN61pZowEJ0.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20914 IP address blocks: 80.76.0.0/21 maxlen: 21 2a00:ce8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:dc:fc:e0:40:d0:ab:64:bb:be:73:23:4d:f3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9f293b5cf7610278bab1634a4deb5a59a30109d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:91:00:33:8b:8b:56:46:6b:65:dd:60:41: 35:c8:47:b0:4c:35:ea:77:db:d0:38:27:09:77:5a: 9d:b3:f7:3a:2a:2f:e5:58:e7:3c:04:20:20:ba:43: 7a:13:2a:07:d8:79:f4:58:fd:5f:63:1c:16:eb:56: 48:8c:14:bd:95:ba:c0:09:fc:ec:65:3e:be:d6:b9: be:0f:af:75:77:2c:f4:2a:e2:e1:e3:4a:52:9e:ee: 71:5e:92:7a:87:e2:16:a1:80:03:68:b1:b4:af:d8: 48:a0:70:3d:be:5f:5d:dc:cb:0c:c1:5f:eb:8f:c7: a6:19:16:89:a5:0d:e6:d4:b0:6b:2f:29:ce:a8:a4: 26:57:51:b3:ae:fb:bf:85:75:14:01:c3:22:b1:ed: 1d:5b:32:66:1a:14:b0:85:74:14:83:86:46:10:cb: 63:dd:3a:06:0c:88:55:f0:ae:90:f2:40:fc:76:b0: af:72:b2:51:17:f2:03:42:fd:10:1c:c6:0e:95:8a: 1d:a8:08:0e:d7:1b:c3:ca:b5:f6:28:a8:40:25:1b: bf:a7:b1:82:0d:c4:42:9b:04:17:44:bf:dd:ad:cc: cf:71:17:c4:02:ef:4e:5c:7c:e2:e3:18:6c:d0:85: a9:f4:36:3e:94:22:ef:09:b1:a8:85:15:ce:9c:f4: 2a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F2:93:B5:CF:76:10:27:8B:AB:16:34:A4:DE:B5:A5:9A:30:10:9D X509v3 Authority Key Identifier: keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/qfKTtc92ECeLqxY0pN61pZowEJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.0.0/21 IPv6: 2a00:ce8::/32 Signature Algorithm: sha256WithRSAEncryption 79:e0:4e:c8:33:72:2e:10:75:15:22:a5:52:ee:c6:6c:83:1b: f8:44:83:bd:aa:1f:15:ae:e8:03:c1:d0:13:96:97:1f:d1:98: 41:b4:87:60:f2:d3:47:a3:47:09:4e:7e:e1:df:cd:87:f3:b6: 9b:cd:f1:d4:b5:7e:95:ac:97:1f:20:1e:39:e8:7d:47:99:c4: 1c:7c:a2:68:39:14:b8:a5:8c:c7:bb:f9:84:f6:00:ad:99:73: 0a:fb:6d:cb:4c:26:45:b2:b9:a6:da:cb:f6:2d:8f:85:d1:0a: 33:73:ab:8c:c5:67:fc:ac:6c:60:60:f5:cc:17:a8:24:9a:3c: 4b:8b:4d:39:40:93:05:ba:99:b2:36:82:02:67:93:f0:73:30: ca:56:51:ff:d1:bd:46:78:a8:1d:c6:1d:a5:4d:07:71:d3:75: 0e:da:32:d6:54:fe:f2:74:ab:c6:11:39:4d:30:b4:02:47:a2: ef:c9:47:7f:68:8e:22:86:01:0b:55:81:03:78:de:64:43:bc: f3:90:0a:25:24:46:68:f3:b3:e5:3c:a2:29:4d:af:ab:4d:1d: e7:fe:01:9c:ae:de:21:cd:d4:a8:8c:89:4c:4a:2d:f3:7c:16: bc:b1:b7:d6:0b:66:3b:4c:25:00:08:a1:4b:e1:e0:c7:c6:03: 7d:2f:d9:c0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6x9z84EDQq2S7vnMjTfNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MmIzMDNjYjQ5ZTczZTJkMmE0MDQ1ODNkNWY4Mzc3Y2Vi MDI1NDUwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWYyOTNiNWNmNzYxMDI3OGJhYjE2MzRhNGRlYjVhNTlhMzAxMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+ORADOLi1ZGa2XdYEE1yEewTDXq d9vQOCcJd1qds/c6Ki/lWOc8BCAgukN6EyoH2Hn0WP1fYxwW61ZIjBS9lbrACfzs ZT6+1rm+D691dyz0KuLh40pSnu5xXpJ6h+IWoYADaLG0r9hIoHA9vl9d3MsMwV/r j8emGRaJpQ3m1LBrLynOqKQmV1Gzrvu/hXUUAcMise0dWzJmGhSwhXQUg4ZGEMtj 3ToGDIhV8K6Q8kD8drCvcrJRF/IDQv0QHMYOlYodqAgO1xvDyrX2KKhAJRu/p7GC DcRCmwQXRL/drczPcRfEAu9OXHzi4xhs0IWp9DY+lCLvCbGohRXOnPQqwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKnyk7XPdhAni6sWNKTetaWaMBCdMB8GA1UdIwQY MBaAFAgrMDy0nnPi0qQEWD1fg3fOsCVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQt YjQ3M2NlNzgwN2NhLzEvcWZLVHRjOTJFQ2VMcXhZMHBONjFwWm93RUowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQtYjQ3M2NlNzgwN2Nh LzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDUEwAMA0E AgACMAcDBQAqAAzoMA0GCSqGSIb3DQEBCwUAA4IBAQB54E7IM3IuEHUVIqVS7sZs gxv4RIO9qh8VrugDwdATlpcf0ZhBtIdg8tNHo0cJTn7h382H87abzfHUtX6VrJcf IB456H1HmcQcfKJoORS4pYzHu/mE9gCtmXMK+23LTCZFsrmm2sv2LY+F0Qozc6uM xWf8rGxgYPXMF6gkmjxLi005QJMFupmyNoICZ5PwczDKVlH/0b1GeKgdxh2lTQdx 03UO2jLWVP7ydKvGETlNMLQCR6LvyUd/aI4ihgELVYEDeN5kQ7zzkAolJEZo87Pl PKIpTa+rTR3n/gGcrt4hzdSojIlMSi3zfBa8sbfWC2Y7TCUACKFL4eDHxgN9L9nA -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:05 2026 by rpki-client